all messages for Emacs-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* bug#28505: 26.0.60; Crash in Fmove_point_visually
@ 2017-09-18 20:09 Benjamin Riefenstahl
  2017-09-18 21:02 ` Benjamin Riefenstahl
  0 siblings, 1 reply; 8+ messages in thread
From: Benjamin Riefenstahl @ 2017-09-18 20:09 UTC (permalink / raw)
  To: 28505

[-- Attachment #1: Type: text/plain, Size: 613 bytes --]



I read my mails in Gnus in an "emacs -nw" instance that I access via SSH
(this instance where I am writing this uses the same setup).  When I
have read my mails, I can make Emacs crash with the sequence <M-x a LEFT
RIGHT>.  GDB says this is in Fmove_point_visually at "BUFFERP
(g->object)".  I am attaching a GDB log with my commands added manually.

This does not reproduce without running Gnus before, so I can not run
this from a plain emacs -Q.  It looks to me like there is garbage in the
"row" struct, or the pointer row itself is garbage.

Let me know if I can do some more usefull debugging next time.


[-- Attachment #2: gdb.txt --]
[-- Type: text/plain, Size: 8109 bytes --]

#### bt
#0  Fmove_point_visually (direction=6) at xdisp.c:22414
#1  0x0818a936 in Ffuncall (nargs=2, args=0xbfffe724) at eval.c:2766
#2  0x081be57d in exec_byte_code (bytestr=<optimized out>, vector=137181397, maxdepth=18, args_template=0, nargs=0, 
    args=<optimized out>) at bytecode.c:629
#3  0x0818a532 in funcall_lambda (fun=1919251573, nargs=154410364, nargs@entry=1, arg_vector=0x5, arg_vector@entry=0xbfffe918)
    at eval.c:3049
#4  0x0818a8b3 in Ffuncall (nargs=2, args=0xbfffe914) at eval.c:2780
#5  0x08186e02 in Ffuncall_interactively (nargs=2, args=0xbfffe914) at callint.c:252
#6  0x0818a936 in Ffuncall (nargs=3, args=0xbfffe910) at eval.c:2766
#7  0x08187680 in Fcall_interactively (function=2149944, record_flag=0, keys=150520413) at callint.c:844
#8  0x0818a936 in Ffuncall (nargs=4, args=0xbfffea5c) at eval.c:2766
#9  0x081be57d in exec_byte_code (bytestr=<optimized out>, vector=137459357, maxdepth=54, args_template=4102, nargs=1, 
    args=<optimized out>) at bytecode.c:629
#10 0x0818a643 in funcall_lambda (fun=1919251573, nargs=154410364, nargs@entry=1, arg_vector=0x5, arg_vector@entry=0xbfffec5c)
    at eval.c:2967
#11 0x0818a8b3 in Ffuncall (nargs=2, args=0xbfffec58) at eval.c:2780
#12 0x0818a9ef in call1 (fn=7488, arg1=2149944) at eval.c:2617
#13 0x0812a41e in command_loop_1 () at keyboard.c:1486
#14 0x0818928c in internal_condition_case (bfun=0x812a090 <command_loop_1>, handlers=9912, hfun=0x8121d30 <cmd_error>)
    at eval.c:1332
#15 0x0811d0ff in command_loop_2 (ignore=0) at keyboard.c:1114
#16 0x0818921b in internal_catch (tag=10248, func=0x811d0e0 <command_loop_2>, arg=0) at eval.c:1097
#17 0x0811d05e in command_loop () at keyboard.c:1085
#18 0x081219a7 in recursive_edit_1 () at keyboard.c:699
#19 0x08147b68 in read_minibuf (map=1919251573, initial=0, prompt=148196181, expflag=false, histvar=3187432, 
    histpos=1919251573, defalt=0, allow_props=false, inherit_input_method=false) at minibuf.c:685
#20 0x0818b732 in funcall_subr (subr=0x82b27b8 <Sread_from_minibuffer>, numargs=7, args=0xbfffef80) at eval.c:2866
#21 0x0818a936 in Ffuncall (nargs=8, args=0xbfffef7c) at eval.c:2766
#22 0x081be57d in exec_byte_code (bytestr=<optimized out>, vector=137442573, maxdepth=74, args_template=8202, nargs=8, 
    args=<optimized out>) at bytecode.c:629
#23 0x0818a643 in funcall_lambda (fun=1919251573, nargs=154410364, nargs@entry=8, arg_vector=0x5, arg_vector@entry=0xbffff140)
    at eval.c:2967
#24 0x0818a8b3 in Ffuncall (nargs=9, args=0xbffff13c) at eval.c:2780
#25 0x08146a69 in Fcompleting_read (prompt=156385116, collection=137458229, predicate=7512, require_match=23976, 
    initial_input=0, hist=3187432, def=0, inherit_input_method=0) at minibuf.c:1696
#26 0x0818b732 in funcall_subr (subr=0x82b26f8 <Scompleting_read>, numargs=6, args=0xbffff240) at eval.c:2866
#27 0x0818a936 in Ffuncall (nargs=7, args=0xbffff23c) at eval.c:2766
#28 0x081be57d in exec_byte_code (bytestr=<optimized out>, vector=137457829, maxdepth=42, args_template=2, nargs=0, 
    args=<optimized out>) at bytecode.c:629
#29 0x0818a643 in funcall_lambda (fun=1919251573, nargs=154410364, nargs@entry=0, arg_vector=0x5, arg_vector@entry=0xbffff40c)
    at eval.c:2967
#30 0x0818a8b3 in Ffuncall (nargs=1, args=0xbffff408) at eval.c:2780
#31 0x081be57d in exec_byte_code (bytestr=<optimized out>, vector=137459293, maxdepth=14, args_template=0, nargs=0, 
    args=<optimized out>) at bytecode.c:629
#32 0x081c097a in Fbyte_code (bytestr=137459268, vector=137459293, maxdepth=14) at bytecode.c:321
#33 0x0818a006 in eval_sub (form=137459251) at eval.c:2241
#34 0x0818d747 in Feval (form=137459251, lexical=0) at eval.c:2051
#35 0x081870b1 in Fcall_interactively (function=379352, record_flag=0, keys=150520413) at callint.c:357
#36 0x0818a936 in Ffuncall (nargs=4, args=0xbffff67c) at eval.c:2766
#37 0x081be57d in exec_byte_code (bytestr=<optimized out>, vector=137459357, maxdepth=54, args_template=4102, nargs=1, 
    args=<optimized out>) at bytecode.c:629
#38 0x0818a643 in funcall_lambda (fun=1919251573, nargs=154410364, nargs@entry=1, arg_vector=0x5, arg_vector@entry=0xbffff87c)
    at eval.c:2967
#39 0x0818a8b3 in Ffuncall (nargs=2, args=0xbffff878) at eval.c:2780
#40 0x0818a9ef in call1 (fn=7488, arg1=379352) at eval.c:2617
#41 0x0812a41e in command_loop_1 () at keyboard.c:1486
#42 0x0818928c in internal_condition_case (bfun=0x812a090 <command_loop_1>, handlers=9912, hfun=0x8121d30 <cmd_error>)
    at eval.c:1332
#43 0x0811d0ff in command_loop_2 (ignore=0) at keyboard.c:1114
#44 0x0818921b in internal_catch (tag=24792, func=0x811d0e0 <command_loop_2>, arg=0) at eval.c:1097
#45 0x0811d0ba in command_loop () at keyboard.c:1093
#46 0x081219a7 in recursive_edit_1 () at keyboard.c:699
#47 0x08121c88 in Frecursive_edit () at keyboard.c:770
#48 0x080581c0 in main (argc=<optimized out>, argv=0xbffffb64) at emacs.c:1713

#### list
22409			}
22410		      g = row->glyphs[TEXT_AREA];
22411		      e = g + row->used[TEXT_AREA];
22412		      for ( ; g < e; g++)
22413			{
22414			  if (BUFFERP (g->object)
22415			      /* Empty lines have only one glyph, which stands
22416				 for the newline, and whose charpos is the
22417				 buffer position of the newline.  */
22418			      || ROW_GLYPH_NEWLINE_P (row, g)

#### p *g
Cannot access memory at address 0x72657475

#### p g
$1 = (struct glyph *) 0x9341d7c

#### p *g
$2 = {charpos = 1886220131, object = 1919251573, pixel_width = 115, ascent = 0, descent = -18456, voffset = 2499, type = 3, 
  multibyte_p = false, left_box_line_p = false, right_box_line_p = true, overlaps_vertically_p = true, padding_p = false, 
  glyph_not_available_p = false, avoid_cursor_p = true, resolved_level = 27, bidi_type = 7, face_id = 28015, font_type = 7, 
  slice = {img = {x = 24940, y = 26478, width = 28718, height = 28776}, cmp = {from = 1735287148, to = 1885892654}, 
    glyphless = {upper_xoff = 24940, upper_yoff = 26478, lower_xoff = 28718, lower_yoff = 28776}}, u = {ch = 0, cmp = {
      automatic = false, id = 0}, img_id = 0, stretch = {height = 0, ascent = 0}, glyphless = {method = 0, 
      for_no_font = false, len = 0, ch = 0}, val = 0}}

#### p *row
$3 = {glyphs = {0x5409, 0x933c7d8, 0x9014798, 0x933c7d8}, used = {18328, 2305, 21700, 2091}, hash = 155229192, x = 137057476, 
  y = 155229200, pixel_width = 137057476, ascent = 155229208, height = 137057476, phys_ascent = 155229216, 
  phys_height = 137057476, visible_height = 155229224, extra_line_spacing = 137057476, start = {pos = {charpos = 155229232, 
      bytepos = 137057476}, overlay_string_index = 155229240, string_pos = {charpos = 137057476, bytepos = 155229248}, 
    dpvec_index = 137057476}, end = {pos = {charpos = 155229256, bytepos = 137057476}, overlay_string_index = 155229264, 
    string_pos = {charpos = 137057476, bytepos = 155229272}, dpvec_index = 137057476}, minpos = {charpos = 155229280, 
    bytepos = 137057476}, maxpos = {charpos = 155229288, bytepos = 137057476}, overlay_arrow_bitmap = 155229296, 
  left_user_fringe_bitmap = 21700, right_user_fringe_bitmap = 2091, left_fringe_bitmap = 40056, right_fringe_bitmap = 2368, 
  left_user_fringe_face_id = 742596, right_user_fringe_face_id = 40064, left_fringe_face_id = 742596, 
  right_fringe_face_id = 40072, left_fringe_offset = -108, right_fringe_offset = -60, fringe_bitmap_periodic_p = false, 
  redraw_fringe_bitmaps_p = false, enabled_p = true, truncated_on_left_p = false, truncated_on_right_p = true, 
  continued_p = false, displays_text_p = true, ends_at_zv_p = false, fill_line_p = true, indicate_empty_line_p = true, 
  contains_overlapping_glyphs_p = false, full_width_p = true, mode_line_p = false, overlapped_p = true, 
  ends_in_middle_of_char_p = false, starts_in_middle_of_char_p = false, overlapping_p = false, mouse_face_p = false, 
  ends_in_newline_from_string_p = false, exact_window_width_line_p = true, cursor_in_fringe_p = false, 
  ends_in_ellipsis_p = false, indicate_bob_p = false, indicate_top_line_p = false, indicate_eob_p = false, 
  indicate_bottom_line_p = false, reversed_p = false, continuation_lines_width = 137057476, clip = 0x9409c98}

[-- Attachment #3: Type: text/plain, Size: 3958 bytes --]





In GNU Emacs 26.0.60 (build 1, i686-pc-linux-gnu, GTK+ Version 2.24.25)
 of 2017-09-17 built on justinian
Repository revision: 57249fb297237bb942ead1f7a0af0ac20811a9cf
System Description:	Debian GNU/Linux 8.9 (jessie)

Recent messages:
scroll-down-command: Beginning of buffer [3 times]
previous-line: Beginning of buffer [4 times]
Auto-saving...done
next-line: End of buffer [2 times]
Auto-saving...done
Mark set
next-line: End of buffer [19 times]
scroll-down-command: Beginning of buffer [5 times]
Saving file /home/benny/Projects/emacs-26/gdb.txt...
Wrote /home/benny/Projects/emacs-26/gdb.txt

Configured features:
XPM JPEG TIFF GIF PNG RSVG SOUND GPM GSETTINGS NOTIFY LIBSELINUX GNUTLS
LIBXML2 FREETYPE M17N_FLT LIBOTF XFT ZLIB TOOLKIT_SCROLL_BARS GTK2 X11

Important settings:
  value of $LANG: en_US.UTF-8
  locale-coding-system: utf-8-unix

Major mode: Text

Minor modes in effect:
  shell-dirtrack-mode: t
  gpm-mouse-mode: t
  desktop-save-mode: t
  delete-selection-mode: t
  display-time-mode: t
  diff-auto-refine-mode: t
  tooltip-mode: t
  global-eldoc-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  column-number-mode: t
  line-number-mode: t
  auto-fill-function: do-auto-fill
  transient-mark-mode: t

Load-path shadows:
None found.

Features:
(shadow sort emacsbug dirtrack shell pcomplete t-mouse term/linux imenu
elec-pair desktop frameset highline benny-calendar-cfg ange-ftp
benny-unicode generic-x autoinsert cc-cmds cc-engine cc-vars cc-defs
ps-print ps-print-loaddefs ps-def lpr advice benny-url cmuscheme comint
ansi-color ring scheme delsel disp-table time server protbuf cal-china
lunar solar cal-dst cal-bahai cal-islam cal-hebrew holidays hol-loaddefs
vc-git diff-mode easy-mmode vc-fossil vc vc-dispatcher diary-lib
diary-loaddefs cal-menu calendar cal-loaddefs benny-file-cache message-x
message subr-x puny dired dired-loaddefs format-spec mml mml-sec epa
derived epg gnus-util rmail rmail-loaddefs time-date mm-decode mm-bodies
mm-encode mail-parse rfc2231 gmm-utils mailheader bbdb-snarf mail-extr
rfc822 bbdb-com mailabbrev bbdb-autoloads bbdb cl timezone sendmail
rfc2047 rfc2045 ietf-drums mm-util mail-prsvr mail-utils .loaddefs
browse-url autoload radix-tree lisp-mnt finder-inf gh-common gh-profile
rx s marshal eieio-compat ht json map dash info package easymenu
epg-config url-handlers url-parse auth-source cl-seq eieio eieio-core
cl-macs eieio-loaddefs password-cache url-vars seq byte-opt gv bytecomp
byte-compile cconv cl-loaddefs cl-lib mule-util tooltip eldoc electric
uniquify ediff-hook vc-hooks lisp-float-type mwheel term/x-win x-win
term/common-win x-dnd tool-bar dnd fontset image regexp-opt fringe
tabulated-list replace newcomment text-mode elisp-mode lisp-mode
prog-mode register page menu-bar rfn-eshadow isearch timer select
scroll-bar mouse jit-lock font-lock syntax facemenu font-core
term/tty-colors frame cl-generic cham georgian utf-8-lang misc-lang
vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932
hebrew greek romanian slovak czech european ethiopic indian cyrillic
chinese composite charscript charprop case-table epa-hook jka-cmpr-hook
help simple abbrev obarray minibuffer cl-preloaded nadvice loaddefs
button faces cus-face macroexp files text-properties overlay sha1 md5
base64 format env code-pages mule custom widget hashtable-print-readable
backquote inotify dynamic-setting system-font-setting
font-render-setting move-toolbar gtk x-toolkit x multi-tty
make-network-process emacs)

Memory information:
((conses 8 193041 22460)
 (symbols 24 31276 1)
 (miscs 20 40 333)
 (strings 16 60409 2969)
 (string-bytes 1 1885315)
 (vectors 8 24621)
 (vector-slots 4 613375 18028)
 (floats 8 822 684)
 (intervals 28 254 0)
 (buffers 528 13)
 (heap 1024 9005 788))

^ permalink raw reply	[flat|nested] 8+ messages in thread
end of thread, other threads:[~2017-09-20 16:27 UTC | newest]

Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-09-18 20:09 bug#28505: 26.0.60; Crash in Fmove_point_visually Benjamin Riefenstahl
2017-09-18 21:02 ` Benjamin Riefenstahl
2017-09-19  4:11   ` Eli Zaretskii
2017-09-19 16:13     ` Benjamin Riefenstahl
2017-09-19 17:13       ` Eli Zaretskii
2017-09-19 19:22         ` Benjamin Riefenstahl
2017-09-20  5:58           ` Eli Zaretskii
2017-09-20 16:27             ` Benjamin Riefenstahl

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/emacs.git
	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.